Lambeth Florist Privacy Policy

Introduction

At Lambeth Florist, we are committed to protecting our customers' privacy and handling your personal data in accordance with all applicable data protection laws, including the General Data Protection Regulation (GDPR). This Privacy Policy outlines how we collect, use, store, and safeguard personal information for customers who place orders from Lambeth and nearby districts. By using our services, you acknowledge and agree to the terms of this policy.

Scope of This Policy

This Privacy Policy applies to all customers of Lambeth Florist placing orders for delivery or collection in Lambeth and the surrounding districts. It explains how we manage and process personal data in connection with your orders and interactions with our business.

What Data We Collect

When you place an order or interact with us, we may collect the following personal data:

• Contact Information: Your name, address, phone number, and delivery details.
• Order Information: Details of purchased items, delivery instructions, recipient name and address, and messages requested for bouquets or arrangements.
• Payment Information: Payment card details or online payment confirmation, processed securely by our payment processors.
• Account Details: If you register an account, your email address, username, and password.
• Communication Data: Correspondence with us, customer support queries, or feedback provided.
• Technical Data: Your browser type, device identifier, IP address, and website usage statistics (collected via cookies and analytics tools).

Lawful Basis for Processing Your Data

We process your personal data under the following lawful bases, as defined by the GDPR:

• Contractual Necessity: To process and deliver your order, handle payment, and provide customer service.
• Legitimate Interests: To improve our services, maintain security, and communicate with you about your orders.
• Legal Obligations: To comply with laws governing record keeping, financial transactions, and tax reporting.
• Consent: Where specifically required, for example, sending you marketing communications (which you can opt into or out of at any time).

How We Use Your Data

We use your personal data for the following purposes:

• Processing and delivering orders, including sharing recipient information with delivery staff.
• Managing accounts, processing payments, and handling inquiries or complaints.
• Sending service-related communications, such as order confirmations or delivery updates.
• Improving our website, products, and services through aggregated analytics.
• Complying with legal requirements and responding to law enforcement or regulatory inquiries, when mandated.
• Conducting internal record-keeping and business administration.

Data Retention

Your personal information will be retained only as long as necessary for the purposes for which it was collected and in accordance with legal, accounting, and reporting requirements. Typically, we retain order and payment data for up to seven years after the transaction to comply with tax obligations. Customer account details are stored while your account remains active or until you request deletion. Data collected for marketing purposes is retained until you opt out or withdraw consent.

Our Data Processors

To provide our services, we may share your data with selected third-party processors who support aspects of our operations, including:

• Payment Processors: To securely handle card or electronic payments.
• Delivery Partners: To facilitate the prompt delivery of your flowers and gifts.
• IT and Web Service Providers: For hosting, support, and analytics services that help us maintain and improve our website and digital systems.

All our processors are selected carefully to ensure they provide adequate data protection and only process your data as permitted under this policy and the GDPR. We do not sell or rent personal data to third parties for any purpose.

Your Rights Under GDPR

The GDPR provides you with the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal information we hold about you.
• Right to Rectification: If your information is inaccurate or incomplete, you have the right to have it corrected.
• Right to Erasure: You may request deletion of your data where lawful and where it is no longer necessary for us to retain it.
• Right to Restrict Processing: You can limit the way we use your data in specific circumstances.
• Right to Data Portability: You have the right to receive your data in a structured, commonly used format and transfer it to another provider where applicable.
• Right to Object: You can object to the processing of your data for certain purposes, such as direct marketing.
• Right to Withdraw Consent: Where we rely on your consent to process data, you may withdraw it at any time.
• Right to Lodge a Complaint: If you believe we have not handled your data in line with the law, you can complain to your national data protection authority.

Contacting Us Regarding Your Data

If you wish to exercise any of your rights, or if you have questions or concerns about how we handle your personal information, please contact us via the methods outlined on our website. We strive to respond promptly to all legitimate requests and will provide additional information about how you can exercise your data rights if needed.

Keeping Your Data Secure

We implement a range of organisational and technical security measures to safeguard your personal data from unauthorised access, disclosure, alteration, or destruction. These include secure servers, data encryption, access controls, and regular security reviews. While we make every effort to protect your data, no transmission or storage of information can ever be completely secure; you understand and accept these risks when sharing your data with us.

Policy Updates

We reserve the right to amend this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with the revised date. We encourage you to review the policy periodically to stay informed about how your data is protected.